Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
File:                     cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json)
Hash identifier:          RoA90rkXieTpmaPYlzso5UjZz/z/v35qIHRFzWtnFuA=
Subject key identifier:   3D:9F:F3:12:C9:AA:A2:C7:FD:D9:3A:1E:39:3A:43:9F:EC:77:2D:39
Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
Certificate issuer:       /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Certificate serial:       019D26289FABC1856753D7F589C10973F374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
Manifest number:          0BF6
Signing time:             Wed 25 Mar 2026 18:01:29 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:29 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:29 +0000
Files and hashes:         1: A4IQPKMY2VOtogijBuwLkSr_g5k.asa (hash: tj8IYv9LlTx0IXapf0CTWli/SmSES+YcjhcSCMOAsus=)
                          2: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: UxQLRXO4+xtsc2pKKe2dN6jwrhCw57oK36YtlBcdeHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:9f:ab:c1:85:67:53:d7:f5:89:c1:09:73:f3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
        Validity
            Not Before: Mar 25 18:01:29 2026 GMT
            Not After : Mar 26 18:01:29 2026 GMT
        Subject: CN=3d9ff312c9aaa2c7fdd93a1e393a439fec772d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a1:db:9a:83:14:0d:80:43:6f:20:10:fb:5e:
                    51:a1:e7:43:c3:f7:65:9e:b7:a9:cb:6b:d7:c0:36:
                    09:5d:60:66:ff:66:0a:ce:8f:d2:47:0b:09:98:da:
                    4b:d1:89:57:84:d8:b4:a0:d6:ce:94:65:4b:43:14:
                    b3:00:71:d0:83:c3:be:16:d3:4e:f6:0a:69:46:52:
                    5f:49:33:c2:a8:1a:5b:10:b6:29:4f:a1:d6:b0:12:
                    aa:95:66:97:d0:82:9d:08:c7:44:37:89:ed:44:0b:
                    9f:ee:17:40:2f:1d:90:1a:7f:aa:d5:e8:d1:24:38:
                    a9:ae:98:65:5a:d0:df:17:9e:71:37:82:aa:fb:a7:
                    77:51:4c:df:c9:bf:e5:83:ac:61:85:58:3f:b1:85:
                    2b:02:60:64:85:26:41:83:c9:b2:ea:7e:0c:5d:db:
                    ca:f8:37:91:50:0f:d9:06:3e:8a:81:cc:11:bd:9e:
                    c9:26:03:99:06:db:74:0f:a9:f7:8d:f4:1b:a8:2e:
                    5b:13:cf:f7:87:dc:df:88:81:51:9f:23:cf:8b:f5:
                    bf:b4:13:3f:92:0d:93:10:95:1c:f7:47:7f:1c:b5:
                    fb:7e:75:86:44:a5:84:3f:dc:57:32:49:80:58:b8:
                    99:0a:36:56:7d:c9:6f:04:1d:4d:b3:98:7b:fa:35:
                    03:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9F:F3:12:C9:AA:A2:C7:FD:D9:3A:1E:39:3A:43:9F:EC:77:2D:39
            X509v3 Authority Key Identifier:
                keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3f:c9:58:1d:a4:6e:9b:a7:9e:8e:44:77:8e:6b:ab:49:15:
         31:5b:79:40:be:35:82:cb:51:f9:b5:06:c4:4c:fd:0d:59:50:
         8f:35:b4:0a:aa:5e:bf:a5:08:95:c1:ce:27:eb:24:70:6f:37:
         74:dc:6b:31:72:e9:5c:58:88:73:e8:ef:07:e9:50:24:55:60:
         7e:df:02:10:62:74:8b:a5:11:e5:2b:5f:fc:d1:f8:4b:30:39:
         af:e2:68:44:8a:4b:51:09:18:b9:87:8b:3f:dc:3c:27:32:85:
         7b:f9:29:44:c4:67:7e:c9:66:6b:58:5a:fe:7b:5f:24:4f:a5:
         4a:0f:5a:98:d0:21:4e:a0:b8:a6:78:9b:d9:e1:aa:c0:9a:08:
         34:02:b5:3e:47:bf:4c:8d:ca:f8:74:61:22:b4:2d:71:1f:2f:
         21:25:30:c9:62:47:51:2b:dc:6a:9e:f1:ba:47:cf:52:62:00:
         2e:36:2b:f8:73:f3:cd:4a:72:82:30:e0:d2:55:4e:14:2c:8d:
         0b:a7:0b:a8:52:54:c3:54:cf:61:a5:12:a4:20:fc:95:61:fb:
         b9:ac:3c:1b:2b:78:fe:b1:b4:bb:ae:fc:8f:ff:eb:fa:71:bd:
         9a:a6:a0:2a:83:32:49:20:34:f5:e2:f9:00:9a:b7:89:ad:ac:
         46:56:f0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:34 2026 by rpki-client